CVE-2024-46986

CVE-2024-46986 Camaleon CMS Exploit - Arbitrary File Upload This repository contains a Python script that automates the exploitation of a file upload vulnerability in Camaleon CMS. The vulnerability allows an attacker to upload arbitrary files such as Ruby scripts to the server, potentially leadi...

hacker-profile

Instalar dependencias: bundle install npm i Probar con servidor web local: $ bundle exec middleman server Construir: $ gulp build $ bundle exec middleman build...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

[SECURITY] [DLA 4822-1] ruby-oauth2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4822-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 05, 2026 https://wiki.debian.org/LTS -...

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Recorrido de Ruta y Lectura Arbitraria de Archivos Este proyecto es un entorno para practicar y reproducir la vulnerabilidad de inclusión de archivos locales CVE-2019-5418 en Ruby on Rails. Esta vulnerabilidad permite leer cualquier archivo dentro del servidor mediant...

ruby-RCE-CVE-2019-5420-

Ruby Deserialization CVE-2019-5420 https://github.com/PenTestical/CVE-2019-5420 References: 1 Ruby on Rails command execution vulnerability payload implementation process https://hackerone.com/reports/473888 Since ActiveSupport::MessageVerifier and ActiveSupport::MessageEncryptor use Marshal as t...

IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby Ruby Exploit for IIS 6.0 Buffer Overflow CVE-2017-7269 This exploit takes advantage of the ScStoragePathFromUrl buffer overflow found by Zhiniang Peng and Chen Wu. Usage: ruby exploit.rb Encoding option denotes mandatory options...

Awesome-CVE-2020-0601

Increíble-CVE-2020-0601 ✔ 😂 Una increíble lista curada de repositorios para CVE-2020-0601. PoC Ruby ollypwn/CVE-2020-0601 https://github.com/ollypwn/cve-2020-0601 Python kudelskisecurity/chainoffools https://github.com/kudelskisecurity/chainoffools Python saleemrashid/badecparams...

Gitlab-CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injection Unauthenticated Remote Code Injection via GraphQL Directive in GitLab CE/EE — Delete Any Public Project With a Single HTTP Request A hands-on penetration testing lab that reproduces CVE-2026-19478, a critical CVSS 9.4 vulnerability...

CVE-2020-15169

README Este README normalmente documentaría los pasos necesarios para poner en marcha la aplicación. Cosas que quizás quieras cubrir: Versión de Ruby Dependencias del sistema Configuración Creación de la base de datos Inicialización de la base de datos Cómo ejecutar el conjunto de pruebas Servici...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17610 Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17584 Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcion-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcion-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitciin (RubyGems)

RubyGems runs this gem's native extension script ext/bitciin/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

Malicious code in bitcoin-rpc-lite (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17595 Malicious code in crypto-mnemonic-tools (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2023-31606

CVE-2023-31606 Vulnerabilidad Se descubrió un problema de Denegación de Servicio por Expresión Regular ReDoS en la función sanitizehtml de la gema redcloth = v4.0.0. Esta vulnerabilidad permite a los atacantes causar una Denegación de Servicio DoS mediante el suministro de una carga útil...